Disable Sync AD user in CA and DA

[Kenneth_Yeung]

Is it possible to disable AD sync a while, and then resync and how?

We are going to do some stress test and it will create many dummy user, but we dont want to have those dummy user in the CA and DA

Can we archive that? Thanks

[TonySterling]

Hi Kenneth,

Pretty sure you could just stop the Customer Background task.  Just reverse the steps in the Technote:

Employees and Employee Groups created in Compliance Accelerator are not synchronizing due to the customer background task not running

Article:TECH160333

|

Created: 2011-05-18

|

Updated: 2011-06-07

|

Article URL http://www.symantec.com/docs/TECH160333

This might cause searches to not running during this time.  How long is your test? If it is occurring out of hours maybe you can just stop CA\DA all together?

[Kenneth_Adams · Accepted solution]

Yes, you can, Kenneth.  You can stop the ADSynchronization processing through the configuration settings in the CA and DA console.  To stop the ADSynchronization processing:

1. Launch the CA or DA Client with an account that has Application level permissions to change settings, such as the Vault Service Account.
2. Access the Configuration tab.
3. Access the Settings sub-tab.
4. Click on the '+' to the left of Profile Synchronization to expand this section.
5. Locate the row with the option Synchronize profiles.
6. Click on the check box in the Value column of this option to remove the check mark.
7. Click the Save button to save the change.
8. Click the OK button to acknowledge the pop-up alert stating the need to restart the Customer Background Task.
9. Close the CA or DA Client.
10. If you have multiple CA or DA Customers that need to have the ADSynchronization processing stopped, repeat the above steps for each one.  Also, if you have DA's Custodian Manager (CM) and need to prevent it from synchronzing during the testing, follow the steps below for CM before completing Step 11 below. 
11. Restart the Enterprise Vault Accelerator Manager Service (EVAMS) to restart the Customer Background Task as well as establish a new communications channel with the SQL Server hosting the CA or DA databases.

To stop ADSynchronization for DA's Custodian Manager:

1. Launch Internet Explorer (IE) and log onto the CM web site (for example: http://DAServer/CustodianManager) as the Vault Service Account (VSA)
2. Click on the word Settings in the View Application Settings line.
3. Click on the drop down arrow next to General in the Settings for line.
4. Select the Profile Synchronization opion.
5. Click on the Edit option in the right column of the line for the option Synchronize profiles.
6. Remove the check mark in the Value column of this opton.
7. Click OK in the right column of this option.
8. Click the OK button at the bottom of the page to save this change.
9. Click the OK button in the pop-up box to acknowledge the requirement to restart the Customer Background Tasks.
10. Close IE.
11. Complete Step 11 above.

When you're ready to automatically synchronize the accounts again, follow the same steps as above, but place a check mark in the check box for the Synchronize profile option.

These steps should do what you want.  Let us know if you need anything more for this request.

Ken

[EV_Ajay]

Hi ,

The steps provided by Ken is very good. Could you give the update regarding the issue.

You can refer following article :

Profile Synchronization configuration options
http://www.symantec.com/docs/HOWTO58810